Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
File: nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json)
Hash identifier: TZbWMIQOh1gMiO3ekcQOAMfoWUCzGxmhQhv6hkdHrZI=
Subject key identifier: C8:1F:EF:1A:AD:24:6F:0D:9F:B1:B9:AE:D9:66:58:E8:29:56:D0:BA
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial: 019F81F99DF117092D9E0A4C6CA3D4DD777E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
Manifest number: 19C1
Signing time: Tue 21 Jul 2026 00:00:47 +0000
Manifest this update: Tue 21 Jul 2026 00:00:47 +0000
Manifest next update: Wed 22 Jul 2026 00:00:47 +0000
Files and hashes: 1: 0Pd5gy1haK4v6OlTaLPDRmtxWpo.roa (hash: EzclGfghMLp2uc4PlgnAz7kDOAZSuAY96WRm8e0asj4=)
2: 6zJUO9RbzLWdWeLPIAC4BRt20y8.roa (hash: VqpAVUw0h0qkGOlMqRzOLvCd/yLUIDbbUUoOf2xDNIw=)
3: eDu9UPYyz5Jbf-XKyeS71yiEEec.roa (hash: avsknqZQJ99jD7fEDnp/UuPCpVghiI2Oj1daPMTPgxM=)
4: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: xgIV0Hs5CZizvIKyLBZBEsfWYCZAcKnknEpqhXuqWwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:f9:9d:f1:17:09:2d:9e:0a:4c:6c:a3:d4:dd:77:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Validity
Not Before: Jul 21 00:00:47 2026 GMT
Not After : Jul 22 00:00:47 2026 GMT
Subject: CN=c81fef1aad246f0d9fb1b9aed96658e82956d0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:58:bb:bd:4e:48:55:30:38:c4:8f:45:2d:
7d:f0:43:89:fb:2c:21:55:c7:e1:da:b5:00:ca:0f:
40:be:0c:07:c3:44:83:19:55:56:8f:f1:54:24:d5:
52:d4:74:9d:23:84:55:61:f6:ca:e5:4b:0d:62:ec:
5a:51:92:30:bd:b4:6d:98:68:59:4f:e7:86:05:e1:
54:7b:55:36:91:2c:10:89:36:56:6c:df:b3:25:26:
3d:fb:bc:e6:b5:e5:9a:ed:a1:7d:17:04:06:2d:96:
61:9e:b9:90:00:47:48:10:e3:90:84:33:42:95:26:
9e:0c:53:e8:3a:75:36:13:bb:42:a5:43:5f:3a:ad:
88:38:66:e3:8b:4b:80:09:6d:56:83:a7:58:68:46:
78:a9:ce:4f:1f:71:41:26:6f:9b:e3:86:eb:02:19:
55:34:16:fd:be:49:f9:5e:c9:1e:77:eb:f4:c8:75:
03:6f:88:37:e7:37:a3:d7:f2:72:d9:c6:98:3d:80:
02:48:f4:51:8a:fc:86:2c:b6:ce:d9:75:2b:2a:b9:
8f:6c:26:62:37:96:f2:48:07:fa:f5:c8:28:ff:e4:
ad:59:b3:17:6d:50:57:9b:a7:7a:e0:72:c8:65:42:
ec:79:8b:71:11:86:54:aa:cf:7b:f4:a5:7c:70:0c:
26:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1F:EF:1A:AD:24:6F:0D:9F:B1:B9:AE:D9:66:58:E8:29:56:D0:BA
X509v3 Authority Key Identifier:
keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:cd:9f:e1:3f:7c:ec:5e:88:57:ab:d0:3b:b1:93:45:d6:b6:
23:be:c0:85:77:c2:2e:ad:cd:0f:b9:89:06:91:11:cb:02:cc:
0e:43:ed:2e:b4:42:c4:f9:f8:b6:9e:d0:dc:2c:f8:71:51:11:
c9:16:ed:13:98:96:93:e7:3e:6a:96:bd:20:cc:66:d8:f7:46:
e9:d8:1e:42:f6:fc:91:8a:55:23:62:52:f4:9f:f9:a3:3f:2e:
dc:64:06:f9:76:48:cc:cd:56:9c:f3:8c:5c:4b:9b:60:c7:70:
75:91:64:ed:63:a7:4d:be:48:2c:97:43:a3:c4:b7:86:79:92:
86:b8:2a:c3:5f:f5:43:a8:fe:85:f8:d3:95:cf:ef:fe:58:bb:
70:71:c5:bb:26:08:81:e9:a5:54:87:19:b8:29:76:1d:26:7e:
7f:f5:64:69:ea:3a:6b:57:95:6c:e9:fc:2d:2e:06:35:94:13:
3f:07:6f:b9:98:93:1b:2e:21:3f:ec:e3:90:a5:39:7f:03:b7:
48:04:ec:b4:19:2b:a2:24:28:bc:b7:31:e7:50:b6:02:0b:72:
30:51:ab:fc:21:59:0e:41:f6:01:5d:d1:91:7c:4c:74:d6:d3:
a7:e7:ed:4b:27:76:48:4f:fc:32:3c:f3:e5:23:07:e2:e1:12:
0a:de:a1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:01:48 2026 by rpki-client